Lucene search
+L

144 matches found

OSV
OSV
added 2017/01/10 3:59 p.m.8 views

UBUNTU-CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

7.5CVSS7.1AI score0.01826EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2017/01/10 12:0 a.m.8 views

PT-2017-8994

Name of the Vulnerable Software and Affected Versions Python HPACK library versions 1.0.0 through 2.2.0 Description A denial of service attack, known as an "HPACK Bomb" attack, can be launched against the HTTP/2 implementation built using the Python HPACK library. This occurs when an attacker...

8.7CVSS7.2AI score0.01826EPSS
SaveExploits0References23
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/07/25 2:15 a.m.6 views

Android OS issue where it is affected by the CRIME attack

Overview The implementation of the TLS protocol in Android OS contains a vulnerability where plaintext HTTP headers may be obtained. The TLS protocol contains a function that compresses data for communications between the client and server. This function does not properly obfuscate the length of...

3.7CVSS9.1AI score0.04266EPSS
SaveExploits2References12
Tenable Nessus
Tenable Nessus
added 2012/08/29 12:0 a.m.37 views

SeaMonkey < 2.12.0 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.12.0. Such versions are potentially affected by the following security issues : - An error exists related to 'Object.defineProperty' and the location object that could allow cross-site scripting attacks. CVE-2012-1956 - Unspecified memory safet...

10CVSS7AI score0.07762EPSS
SaveExploits2References40
Rows per page
Query Builder